programsallow
programsallow is a term used in information security to describe the practice of configuring a computing environment to permit execution only of a predefined set of programs and components. As a governance approach, it implements an allowlist policy for executables, libraries, scripts, and related resources, aiming to minimize the attack surface by blocking untrusted software by default.
Implementation and scope include enforcing the policy at multiple levels, such as operating system controls, endpoint
Applications and examples: in enterprise environments, programsallow resembles traditional application whitelisting. Tools and features that support
Benefits and limitations: the primary benefit is a reduced risk of malware and unintended code execution, with
See also: allowlisting, application whitelisting, software restriction policies, secure-by-default, sandboxing.